Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/RrwhcN56jF8EtcipjzaUNJlFRKM.roa
File: RrwhcN56jF8EtcipjzaUNJlFRKM.roa (raw, json)
Hash identifier: XdszxIqvGboeLZQ4zleYeqKXyETT3JhawmktsWXBgmk=
Subject key identifier: 46:BC:21:70:DE:7A:8C:5F:04:B5:C8:A9:8F:36:94:34:99:45:44:A3
Certificate issuer: /CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
Certificate serial: 01926ABCC42FD4CE2E0A297784EF2C825ACD
Authority key identifier: 7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/RrwhcN56jF8EtcipjzaUNJlFRKM.roa
Signing time: Tue 08 Oct 2024 06:06:48 +0000
ROA not before: Tue 08 Oct 2024 06:06:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49100
IP address blocks: 109.125.128.0/19 maxlen: 19
109.125.128.0/22 maxlen: 22
185.82.28.0/22 maxlen: 22
185.82.28.0/24 maxlen: 24
185.129.184.0/21 maxlen: 21
185.129.196.0/22 maxlen: 22
185.129.197.0/24 maxlen: 24
185.129.200.0/22 maxlen: 22
185.129.212.0/22 maxlen: 22
185.129.216.0/22 maxlen: 22
185.129.228.0/22 maxlen: 22
185.129.230.0/23 maxlen: 23
185.129.237.0/24 maxlen: 24
185.129.240.0/22 maxlen: 22
2a03:54a0::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6a:bc:c4:2f:d4:ce:2e:0a:29:77:84:ef:2c:82:5a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
Validity
Not Before: Oct 8 06:06:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46bc2170de7a8c5f04b5c8a98f369434994544a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:23:9d:16:73:70:3d:59:e1:61:3e:6a:c2:52:
e9:62:ec:dd:d6:71:ec:2e:f2:c8:ec:68:37:c0:3d:
25:e5:cd:cd:c1:c5:cf:51:d5:63:05:e5:64:aa:b5:
e9:ae:8c:bf:12:00:f1:16:e3:51:a9:3a:b8:8f:9c:
01:fb:c9:2a:9d:be:66:bb:c4:9f:8e:5e:08:31:12:
d4:e2:e9:b9:37:8e:61:33:0a:14:60:86:d8:51:79:
5c:65:6b:23:9a:f6:5b:69:a2:85:42:8c:f4:e5:fc:
b9:ff:7a:db:d5:48:41:f2:d2:1c:bb:e5:ed:ca:8c:
a5:59:23:59:16:9f:3d:ff:69:2a:0e:e0:bd:ed:3f:
dd:aa:58:39:a0:e5:ed:73:49:79:a2:bf:9a:44:e0:
4e:ba:ab:b3:f4:d0:da:33:14:d7:1f:d2:04:40:6a:
61:80:2b:ce:29:f6:3b:78:c1:0f:cf:9b:97:2f:5b:
51:a6:32:22:92:f5:8f:ad:97:25:a7:a0:59:02:e2:
52:be:2f:25:f2:20:cb:a2:9f:98:bf:44:22:38:d7:
63:9d:51:fe:46:9e:f9:4e:37:d9:2c:0c:52:43:9f:
89:b9:b3:b2:88:68:b9:88:0d:74:41:dd:06:e1:ec:
8a:e1:b6:f8:22:63:da:5e:1f:e6:a5:04:30:9d:2f:
fd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:BC:21:70:DE:7A:8C:5F:04:B5:C8:A9:8F:36:94:34:99:45:44:A3
X509v3 Authority Key Identifier:
keyid:7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/RrwhcN56jF8EtcipjzaUNJlFRKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.125.128.0/19
185.82.28.0/22
185.129.184.0/21
185.129.196.0-185.129.203.255
185.129.212.0-185.129.219.255
185.129.228.0/22
185.129.237.0/24
185.129.240.0/22
IPv6:
2a03:54a0::/32
Signature Algorithm: sha256WithRSAEncryption
01:45:98:d0:c4:5d:cc:14:8c:5b:ab:8a:66:aa:e6:da:e5:2d:
91:8a:39:de:cb:e5:12:0e:fd:01:ee:43:c2:32:fb:ff:a3:4f:
97:cf:d7:53:28:9c:7f:cb:bc:42:83:2d:87:3b:db:2e:d8:91:
81:13:8a:0b:c6:33:66:3c:ee:c4:14:0a:ee:8c:3c:ac:6e:b9:
bc:d6:9c:fa:f5:23:2a:e8:06:be:49:f5:10:17:bb:9b:64:aa:
06:eb:07:ff:a3:13:50:3f:7b:89:d2:6c:21:40:fc:27:7a:0e:
f3:a8:c3:f7:26:12:38:56:31:e9:b5:6d:4e:02:21:b4:42:49:
f5:74:54:e6:8f:16:3f:9f:06:94:de:22:c9:76:59:a1:df:71:
78:4a:5c:76:ae:2e:ff:bf:32:06:9e:58:8a:13:5b:ab:73:a7:
9b:f7:91:7c:49:48:66:28:d6:b6:e0:40:30:d3:4d:f7:57:e5:
8a:6e:81:00:13:94:a9:89:b0:15:ae:39:8e:71:b6:a7:38:0e:
54:5f:69:cb:ab:6e:a7:02:5b:50:bd:68:88:e9:45:0b:52:39:
eb:01:ab:bb:e7:46:e1:9a:12:e5:92:6d:e5:d0:5c:40:fe:6e:
fc:ba:ce:f8:31:d2:26:69:e1:07:31:83:87:48:2a:a1:cf:ff:
8b:2b:27:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:20 2025 by rpki-client